Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa
File:                     3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier:          26ot1PKvtYIGhN+ofIphnAD5EZrR1ibI260zB6z2O0s=
Subject key identifier:   52:4E:59:4B:0D:C7:89:0B:9B:0F:21:7F:C1:A6:1D:06:A5:4E:23:94
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       021B0D053ED517F885AF6D08C1BFFAD8E22C342B
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:47 +0000
ROA not before:           Fri 03 Oct 2025 02:23:47 +0000
ROA not after:            Fri 02 Oct 2026 02:28:47 +0000
asID:                     270704
IP address blocks:        189.127.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:0d:05:3e:d5:17:f8:85:af:6d:08:c1:bf:fa:d8:e2:2c:34:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:47 2025 GMT
            Not After : Oct  2 02:28:47 2026 GMT
        Subject: CN=524E594B0DC7890B9B0F217FC1A61D06A54E2394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:c1:da:d3:05:66:bd:ae:0f:95:06:07:59:
                    fa:c9:9b:ff:66:98:84:f4:02:ba:67:cd:a1:98:81:
                    8c:21:9d:a2:f9:1b:d9:48:ee:f6:0b:c1:1b:24:81:
                    c7:bb:b8:f8:ff:54:c2:d7:31:be:eb:4c:a0:de:17:
                    06:2f:a2:1a:96:83:61:44:2b:a3:aa:74:c6:78:f7:
                    54:2b:4a:05:cc:2f:9e:dc:1b:f7:0a:1a:73:d7:80:
                    fa:e1:5c:24:7c:6c:85:04:f8:a3:9e:15:bc:3e:cd:
                    4f:74:6e:99:4d:76:12:94:dc:87:c9:ca:fe:de:bf:
                    1c:0a:94:f9:df:94:25:38:6f:c3:8b:e1:44:c7:a2:
                    11:ce:57:d7:45:6b:5c:9f:c6:2f:95:67:db:20:2d:
                    25:f1:9a:92:67:b8:b3:4f:dc:72:03:99:78:46:b2:
                    6c:49:29:ec:a7:f9:7a:66:a8:8c:9e:e1:d1:a8:e8:
                    47:3f:d4:61:ce:7b:28:71:6a:f9:b2:53:4d:0e:6c:
                    48:4e:f5:51:5b:17:d9:4e:89:67:51:f4:ce:36:77:
                    66:d6:86:45:34:5b:a2:8d:d1:55:80:c1:b8:01:4e:
                    9c:f3:b2:9a:62:2f:56:b0:08:7d:88:9b:6d:02:6d:
                    da:36:7c:9b:b6:82:52:59:22:b3:fd:20:ed:f7:2f:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:59:4B:0D:C7:89:0B:9B:0F:21:7F:C1:A6:1D:06:A5:4E:23:94
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134342e302f32342d3234203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:07:b2:34:32:73:ac:ba:1b:5e:30:b7:d3:95:e8:e7:7a:cc:
         61:87:1a:fd:7d:5a:4d:a6:3e:4f:f1:70:3f:b7:26:86:60:ff:
         b2:14:29:fa:97:02:6b:42:fe:b8:55:e1:ae:bc:eb:69:b9:0f:
         9c:37:98:fb:1d:05:cc:9d:6d:65:2e:86:43:9d:60:08:c4:3a:
         a3:73:56:76:1d:39:b4:01:4e:44:48:27:72:82:35:85:ce:88:
         ec:52:0a:79:43:78:f3:f3:1f:a7:3c:c2:c4:15:f9:99:2a:8f:
         9c:ab:e3:dd:db:b5:ec:cc:bd:e5:8a:6a:c5:02:93:64:ba:6d:
         70:13:6b:cb:56:06:94:4d:96:d5:bb:6a:c0:f9:f5:a9:7c:c5:
         da:ce:fb:68:cd:0b:88:c1:83:c3:f7:bf:cb:b6:59:dc:f9:8a:
         48:dc:0d:e2:a8:7c:00:e5:b8:d8:20:fd:22:91:80:5d:ad:4d:
         19:be:9d:71:0e:1d:38:10:9f:77:75:05:67:2d:74:a5:3d:99:
         ce:ac:81:d1:7c:90:4d:5d:46:84:d2:77:3a:f1:df:83:a4:b9:
         e7:d4:2a:a4:81:7f:d9:33:a8:13:ca:32:2f:e6:3b:83:00:74:
         b8:be:50:59:38:7e:d8:c3:7b:5d:60:8e:f3:bf:e6:31:7e:73:
         e0:7b:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:52 2025 by rpki-client